CVE-2020-1448: High severity microsoft office vulnerability
Published Jul 14, 2020
·Updated
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.
Affected Software
8 affected components
Microsoft Office=2019
Microsoft Office Online Server=1.0
Microsoft Office Web Apps=2013-sp1
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Server=2019
Microsoft Word=2013-sp1
Microsoft Word=2016
Microsoft Word Rt=2013-sp1
Remediation
Event History
Jul 14, 2020
CVE Published
via MITRE·10:54 PM
Data Sourced
via MITRE·10:54 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-1448?
CVE-2020-1448 is a remote code execution vulnerability in Microsoft Word software.
2
How does CVE-2020-1448 impact Microsoft Word?
CVE-2020-1448 allows attackers to execute code remotely in Microsoft Word software.
3
What is the severity level of CVE-2020-1448?
CVE-2020-1448 has a severity level of 8.8 (high).
4
Which versions of Microsoft Office are affected by CVE-2020-1448?
Microsoft Office 2019, 2013 (SP1), and 2016 are affected by CVE-2020-1448.
5
Is there a fix available for CVE-2020-1448?
Yes, Microsoft has released a security update to fix CVE-2020-1448. It is recommended to install the latest updates.